Check $_SERVER['HTTP_REFERER'] and if it doesn't match your site, then deny access...
Another possibility is that if this is part of a shopping cart, you may be using sessions already. If so, add a variable to the session and check for the existence of it on the pages.....if it's not there, they didn't come from your site...